$ rpki-client -vvvf rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft File: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft (raw, json) Hash identifier: JQcNH0rlhhdmbkI/mgckzh+Pm2rSZ/bf/7FeShQFH9Y= Subject key identifier: 83:CE:E9:E9:03:EC:1F:CB:3F:D2:C7:2C:A1:4B:54:EE:80:E9:6A:D9 Authority key identifier: 5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F Certificate issuer: /CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Certificate serial: 53D9CF010DA80AF085B31775E1F380D102F851A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft Manifest number: BE Signing time: Sun 20 Sep 2026 22:44:59 +0000 Manifest this update: Sun 20 Sep 2026 22:39:59 +0000 Manifest next update: Tue 22 Sep 2026 02:13:59 +0000 Files and hashes: 1: 5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl (hash: QUTTU+88mBoo+d1pAPUrX4hKUsWmCbiw0N3Y94mNTeY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d9:cf:01:0d:a8:0a:f0:85:b3:17:75:e1:f3:80:d1:02:f8:51:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F Validity Not Before: Sep 20 22:39:59 2026 GMT Not After : Sep 22 02:13:59 2026 GMT Subject: CN=83CEE9E903EC1FCB3FD2C72CA14B54EE80E96AD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7b:14:94:73:b4:a1:6b:0f:76:b8:91:c3:85: 60:c4:e6:98:4a:22:eb:75:5a:3f:58:7c:81:28:22: 63:d6:e3:d9:f1:0b:fa:8a:0a:11:e1:5d:e4:ef:28: a3:ac:28:d9:0d:41:ac:af:49:82:68:0e:92:7a:f3: 17:48:27:8b:35:f2:96:bb:78:46:71:90:8f:c8:a6: 91:5a:32:1a:ec:a4:cd:30:e8:ad:c8:a2:7e:4d:ae: 16:f5:a6:a5:44:49:a1:c3:6b:ef:d7:07:bc:a8:70: 5d:23:6b:f6:db:ef:95:fb:2c:2b:81:56:15:6e:2f: 96:55:ec:06:f8:4e:8c:59:bb:4f:14:60:b7:c7:0b: 5a:f0:10:8f:44:0c:9b:0e:eb:b3:3d:71:b3:4f:04: 0b:5f:ed:3c:ba:1f:02:8f:e0:bd:0b:b8:ca:94:7c: d8:0c:c0:14:60:38:2c:b1:2f:7d:15:62:aa:07:c7: 61:f9:68:5d:91:2f:e8:b6:0e:64:05:00:4f:8a:55: 3b:b1:0b:9e:ce:40:0d:01:c8:e5:36:63:ab:c3:29: 12:92:da:99:10:7d:93:bc:9a:88:40:db:c8:a1:13: 94:d4:f2:34:19:5a:92:72:6a:79:2d:a9:6d:d2:85: d9:94:43:23:8a:7f:e5:8c:b6:5a:3b:8e:9f:22:0a: 06:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CE:E9:E9:03:EC:1F:CB:3F:D2:C7:2C:A1:4B:54:EE:80:E9:6A:D9 X509v3 Authority Key Identifier: keyid:5D:7C:FA:91:FB:D3:09:B4:50:5F:E1:D6:16:62:F4:AE:1F:4F:02:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/5D7CFA91FBD309B4505FE1D61662F4AE1F4F026F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:3a:a1:61:14:ae:72:23:ef:b8:35:cb:b6:d5:a6:ad:74:24: 00:e4:2a:04:79:f6:aa:89:73:32:66:fc:37:52:38:bd:39:89: 30:32:6e:98:49:a7:66:e7:9e:95:09:ba:5b:4d:5a:d1:24:5e: 33:28:5f:9d:ed:b0:4f:78:69:74:88:f4:07:5d:73:76:c0:81: 1c:e3:5f:73:43:e3:79:d3:fe:0c:c2:b3:39:98:02:ab:c4:2e: a6:a9:d1:cb:84:e7:13:f7:c3:16:6e:d5:bf:b0:83:b5:c3:4d: 70:c0:84:de:9d:14:36:1d:05:8a:5f:20:e5:1f:eb:28:7a:a4: bc:fb:40:a4:f1:36:ea:05:6b:01:f3:c0:27:58:b1:c3:e7:56: a2:0e:ad:de:8f:49:6f:72:d8:90:0a:09:20:51:f5:7b:7b:2b: 7d:4a:bc:d3:9f:c7:40:97:a2:5f:41:bb:12:74:82:03:38:96: a6:ec:4f:8b:16:90:35:c8:6a:9b:fe:b8:7e:be:9a:90:56:24: e8:7d:a6:ac:da:b6:14:78:9b:3d:b9:cd:a1:a4:f3:de:62:ea: e4:f5:2b:28:cb:76:d9:5c:00:4f:a5:b8:0f:0f:84:30:d3:10: eb:a7:13:5e:9e:f2:40:21:3c:a9:4d:c9:42:1e:06:3d:47:3b: 58:2e:cd:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9nPAQ2oCvCFsxd14fOA0QL4UaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUx RjRGMDI2RjAeFw0yNjA5MjAyMjM5NTlaFw0yNjA5MjIwMjEzNTlaMDMxMTAvBgNV BAMTKDgzQ0VFOUU5MDNFQzFGQ0IzRkQyQzcyQ0ExNEI1NEVFODBFOTZBRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjexSUc7Shaw92uJHDhWDE5phK Iut1Wj9YfIEoImPW49nxC/qKChHhXeTvKKOsKNkNQayvSYJoDpJ68xdIJ4s18pa7 eEZxkI/IppFaMhrspM0w6K3Ion5Nrhb1pqVESaHDa+/XB7yocF0ja/bb75X7LCuB VhVuL5ZV7Ab4ToxZu08UYLfHC1rwEI9EDJsO67M9cbNPBAtf7Ty6HwKP4L0LuMqU fNgMwBRgOCyxL30VYqoHx2H5aF2RL+i2DmQFAE+KVTuxC57OQA0ByOU2Y6vDKRKS 2pkQfZO8mohA28ihE5TU8jQZWpJyanktqW3ShdmUQyOKf+WMtlo7jp8iCgZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg87p6QPsH8s/0scsoUtU7oDpatkwHwYDVR0j BBgwFoAUXXz6kfvTCbRQX+HWFmL0rh9PAm8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODhhOGVhN2YtMmY2MS00NDZiLThiNTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFG QkQzMDlCNDUwNUZFMUQ2MTY2MkY0QUUxRjRGMDI2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81RDdDRkE5MUZCRDMwOUI0NTA1RkUxRDYxNjYyRjRBRTFGNEYw MjZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvNUQ3Q0ZBOTFGQkQzMDlCNDUwNUZFMUQ2MTY2MkY0 QUUxRjRGMDI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEI6oWEUrnIj77g1y7bVpq10JADkKgR59qqJ czJm/DdSOL05iTAybphJp2bnnpUJultNWtEkXjMoX53tsE94aXSI9Addc3bAgRzj X3ND43nT/gzCszmYAqvELqap0cuE5xP3wxZu1b+wg7XDTXDAhN6dFDYdBYpfIOUf 6yh6pLz7QKTxNuoFawHzwCdYscPnVqIOrd6PSW9y2JAKCSBR9Xt7K31KvNOfx0CX ol9BuxJ0ggM4lqbsT4sWkDXIapv+uH6+mpBWJOh9pqzathR4mz25zaGk895i6uT1 KyjLdtlcAE+luA8PhDDTEOunE16e8kAhPKlNyUIeBj1HO1guzRo= -----END CERTIFICATE-----Generated at Mon Sep 21 18:27:02 2026 by rpki-client